This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft File: a-SeWhSwy_QQTANLVyoPnxVKmXU.mft (raw, json) Hash identifier: 9x/5FUPtxe3QCSFi8pZGIlqsod+12Yto16cYQtJ8iIo= Subject key identifier: 1E:B9:90:8A:93:FE:B4:DB:88:59:C0:1F:4C:87:9D:95:7C:97:4F:86 Authority key identifier: 6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75 Certificate issuer: /CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975 Certificate serial: 019C41D8BA0F5BCEF93A585E5401FA393717 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft Manifest number: 06B4 Signing time: Mon 09 Feb 2026 10:00:48 +0000 Manifest this update: Mon 09 Feb 2026 10:00:48 +0000 Manifest next update: Tue 10 Feb 2026 10:00:48 +0000 Files and hashes: 1: a-SeWhSwy_QQTANLVyoPnxVKmXU.crl (hash: FqdVxjcv3RS7kGwxA9Oi09U/VfIG1nzPrTFCsRzMB7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:ba:0f:5b:ce:f9:3a:58:5e:54:01:fa:39:37:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975 Validity Not Before: Feb 9 10:00:48 2026 GMT Not After : Feb 10 10:00:48 2026 GMT Subject: CN=1eb9908a93feb4db8859c01f4c879d957c974f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:8e:26:e8:e2:96:c6:6f:78:2e:bf:ff:e9: 27:c7:3c:ab:8a:01:68:20:54:09:87:ea:32:a1:5d: a7:43:28:49:7e:12:0b:1c:6f:af:1f:6e:ed:20:50: 73:c9:06:64:ed:60:25:5c:af:00:89:f7:37:3d:03: 03:57:0b:0e:33:e9:a5:24:9f:40:f6:d9:01:49:77: 73:bb:12:e0:e2:da:19:84:d9:07:0d:b0:23:25:c3: 53:66:40:a2:d2:98:60:d5:0c:35:6a:44:f5:1c:84: fb:7f:be:7b:a2:25:57:d2:95:3c:d1:fb:8e:47:33: f1:91:56:6a:1c:55:18:53:26:63:87:36:40:9b:d4: 26:13:83:25:0d:95:d4:c5:34:13:9a:1d:17:2a:ce: cd:31:2a:11:76:6d:51:37:76:12:d6:b2:3d:e2:82: 59:e8:b7:65:51:40:c1:41:43:04:f4:10:0a:36:6e: 78:af:a2:d4:a9:e5:a4:07:97:ee:75:89:5a:68:70: fd:05:a0:d6:c9:0f:04:15:52:81:f2:b8:5e:66:00: ac:3d:79:ff:3c:70:23:4a:7e:49:4f:ce:05:e7:75: b5:ce:24:7d:9d:8b:ec:7e:a3:08:f1:80:79:5b:5d: 35:db:28:26:5f:22:36:5a:af:5b:f9:62:cc:2e:69: 36:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B9:90:8A:93:FE:B4:DB:88:59:C0:1F:4C:87:9D:95:7C:97:4F:86 X509v3 Authority Key Identifier: keyid:6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:19:d8:c8:d7:81:d2:7c:6c:31:cd:3d:4f:4e:ad:3c:ea:59: af:97:1e:c3:1a:67:9e:ec:3d:b1:d8:43:14:f8:4e:7c:bf:39: 67:a9:9a:0c:ca:d0:62:a4:cc:56:29:5a:14:23:34:8c:08:06: 56:9b:ec:bd:2e:97:69:0e:95:0c:ab:01:bf:c8:50:9b:a4:ed: 55:05:76:82:ec:50:da:56:a6:1b:5b:71:d1:a1:50:25:1c:a3: 87:5d:85:e0:0a:7c:c6:de:46:8c:84:a5:e4:cb:79:cf:05:fc: 4b:49:aa:e7:44:89:3e:25:dd:5c:f8:1f:69:35:f3:a8:fc:0d: d6:42:2e:60:27:16:3b:cb:30:c6:24:c2:5c:0d:33:e9:5e:4c: 46:95:81:a7:61:0e:63:15:de:a5:1f:dd:d6:95:3c:6f:7f:ff: f2:8d:7a:69:0d:63:5a:d6:bf:a1:9e:cb:80:b9:31:34:cd:bb: 8f:50:51:9f:f8:44:7f:56:e0:68:55:91:0d:97:eb:21:e6:0a: a7:d0:c3:20:fa:2a:4c:69:d2:01:6d:b2:88:d5:59:1a:d5:7f: 9a:3f:28:77:f2:3d:ce:74:bd:04:e3:fd:c1:1e:20:e5:38:02: 8f:f9:1e:1d:0c:7a:59:a9:4d:2d:8e:9d:83:5c:62:e7:bb:c9: a9:a4:c9:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2LoPW875OlheVAH6OTcXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZTQ5ZTVhMTRiMGNiZjQxMDRjMDM0YjU3MmEwZjlmMTU0 YTk5NzUwHhcNMjYwMjA5MTAwMDQ4WhcNMjYwMjEwMTAwMDQ4WjAzMTEwLwYDVQQD EygxZWI5OTA4YTkzZmViNGRiODg1OWMwMWY0Yzg3OWQ5NTdjOTc0Zjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou2OJujilsZveC6//+knxzyrigFo IFQJh+oyoV2nQyhJfhILHG+vH27tIFBzyQZk7WAlXK8Aifc3PQMDVwsOM+mlJJ9A 9tkBSXdzuxLg4toZhNkHDbAjJcNTZkCi0phg1Qw1akT1HIT7f757oiVX0pU80fuO RzPxkVZqHFUYUyZjhzZAm9QmE4MlDZXUxTQTmh0XKs7NMSoRdm1RN3YS1rI94oJZ 6LdlUUDBQUME9BAKNm54r6LUqeWkB5fudYlaaHD9BaDWyQ8EFVKB8rheZgCsPXn/ PHAjSn5JT84F53W1ziR9nYvsfqMI8YB5W1012ygmXyI2Wq9b+WLMLmk2mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB65kIqT/rTbiFnAH0yHnZV8l0+GMB8GA1UdIwQY MBaAFGvknloUsMv0EEwDS1cqD58VSpl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS1TZVdoU3d5X1FRVEFOTFZ5b1BueFZLbVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yOTVjOTUtZTM2Ny00Y2EyLTliZDUt YWI5OTdmYzY1MGU0LzEvYS1TZVdoU3d5X1FRVEFOTFZ5b1BueFZLbVhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8yOTVjOTUtZTM2Ny00Y2EyLTliZDUtYWI5OTdmYzY1MGU0 LzEvYS1TZVdoU3d5X1FRVEFOTFZ5b1BueFZLbVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhnYyNeB 0nxsMc09T06tPOpZr5cewxpnnuw9sdhDFPhOfL85Z6maDMrQYqTMVilaFCM0jAgG VpvsvS6XaQ6VDKsBv8hQm6TtVQV2guxQ2lamG1tx0aFQJRyjh12F4Ap8xt5GjISl 5Mt5zwX8S0mq50SJPiXdXPgfaTXzqPwN1kIuYCcWO8swxiTCXA0z6V5MRpWBp2EO YxXepR/d1pU8b3//8o16aQ1jWta/oZ7LgLkxNM27j1BRn/hEf1bgaFWRDZfrIeYK p9DDIPoqTGnSAW2yiNVZGtV/mj8od/I9znS9BOP9wR4g5TgCj/keHQx6WalNLY6d g1xi57vJqaTJ7g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:33 2026 by rpki-client